
$ rpki-client -vvf rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
File: mFDq_-09ooRdUfCVrBEkUIjVYj8.mft (raw, json)
Hash identifier: XxBTVAXAxJ+O+SBpszKty42Kye57lLCqTi82ZxsEukE=
Subject key identifier: 9F:A7:EA:DA:1E:74:5B:0B:06:F9:55:C9:58:AC:AF:2C:66:EA:24:E0
Authority key identifier: 98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
Certificate issuer: /CN=A91678AA/serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
Manifest number: 9E
Signing time: Thu 23 Jul 2026 09:09:57 +0000
Manifest this update: Thu 23 Jul 2026 09:09:56 +0000
Manifest next update: Thu 30 Jul 2026 09:09:56 +0000
Files and hashes: 1: mFDq_-09ooRdUfCVrBEkUIjVYj8.crl (hash: wNdaq/hy4/frVb2IDAIoTKfNr9h073vmJpd6P6zpi1k=)
2: ACA405589E7011F083978F1AC4F9AE02.roa (hash: aqdlEd+hSBzQzve2o5DblyAqPMOMIZAPbkwHiErLH6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91678AA, serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F
Validity
Not Before: Jul 23 09:09:56 2026 GMT
Not After : Jul 30 09:09:56 2026 GMT
Subject: CN=6a61da65-dd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:52:1e:47:0b:b6:96:f4:db:76:12:98:08:
81:5b:32:d5:ac:80:32:16:7c:3f:da:fa:90:26:c1:
da:90:68:ec:06:34:5e:5c:47:77:99:18:36:7c:8e:
0e:be:e5:8e:1b:a2:86:61:93:fc:1a:1b:f7:58:f0:
fe:24:ee:22:22:cb:a2:80:46:84:fa:80:7c:10:09:
85:b9:34:14:a1:a0:02:d7:55:b7:96:bb:90:4a:6e:
a4:31:c4:bf:c2:14:66:ef:04:6c:0e:91:fa:28:c2:
33:8a:c5:6f:3f:c5:bb:1c:e4:50:3c:07:57:af:c4:
7f:dd:5c:db:7a:6b:9a:88:09:87:cb:0a:c5:b9:ec:
81:0b:d3:95:b1:d3:b5:19:46:72:f4:00:28:b5:c6:
e5:f8:82:d1:03:3a:c5:9e:fb:b1:35:11:68:bc:39:
30:d2:99:95:03:bf:f2:68:a1:b4:b0:27:01:08:86:
56:e6:fd:b9:7e:09:e7:47:71:9b:0a:a4:54:a9:56:
03:77:7b:05:c8:cc:63:07:42:e4:ca:3e:f5:68:ff:
69:73:6d:da:a6:54:ad:39:a6:10:5f:e4:21:75:57:
73:c0:10:67:07:a4:53:49:6c:20:41:dc:a7:9f:a6:
79:c1:cc:a7:09:0a:21:e1:60:63:b4:02:bc:39:ad:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A7:EA:DA:1E:74:5B:0B:06:F9:55:C9:58:AC:AF:2C:66:EA:24:E0
X509v3 Authority Key Identifier:
keyid:98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:6f:27:38:78:50:08:a0:f0:a2:bf:37:c4:de:38:49:25:a3:
d5:01:8d:a2:4c:74:4b:bc:53:75:5f:46:77:64:15:9c:c8:31:
77:16:9b:f6:9f:91:57:fe:78:65:56:5f:6a:a1:18:de:3b:f2:
95:54:a8:73:b5:e5:d9:cf:0b:52:0f:a3:39:be:33:7d:71:b6:
62:10:13:e7:49:c8:2d:89:a1:14:d7:52:24:90:b4:d9:a1:a4:
46:84:a9:6e:d0:b5:24:fa:4a:17:5f:7f:aa:aa:05:7c:22:b0:
cc:0d:f0:bd:43:23:b7:0e:6a:f3:0b:6d:78:d1:60:85:d0:47:
78:c6:7d:33:9b:e3:88:a9:cd:cf:86:bf:d5:57:49:17:bf:62:
71:fa:80:db:e4:e5:02:f6:6f:12:10:45:0a:6f:75:aa:e5:46:
02:6a:b5:ef:db:59:c3:c6:66:86:78:b2:88:67:58:e2:cf:42:
5d:f9:13:cb:9b:68:64:39:37:82:3d:ff:16:df:ac:d7:e9:ec:
11:07:4d:a1:c2:9a:3a:52:a1:33:39:be:f9:63:77:90:ae:b0:
af:b6:65:1e:05:53:51:8c:14:3c:0b:e6:cf:12:eb:df:c3:f8:
7c:a6:3c:39:ac:37:46:8e:d4:8c:ef:0b:bc:30:14:d5:08:fc:
48:b4:ce:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc4QUExMTAvBgNVBAUTKDk4NTBFQUZGRUQzREEyODQ1RDUxRjA5NUFDMTEyNDUw
ODhENTYyM0YwHhcNMjYwNzIzMDkwOTU2WhcNMjYwNzMwMDkwOTU2WjAYMRYwFAYD
VQQDEw02YTYxZGE2NS1kZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqk5SHkcLtpb023YSmAiBWzLVrIAyFnw/2vqQJsHakGjsBjReXEd3mRg2fI4O
vuWOG6KGYZP8Ghv3WPD+JO4iIsuigEaE+oB8EAmFuTQUoaAC11W3lruQSm6kMcS/
whRm7wRsDpH6KMIzisVvP8W7HORQPAdXr8R/3VzbemuaiAmHywrFueyBC9OVsdO1
GUZy9AAotcbl+ILRAzrFnvuxNRFovDkw0pmVA7/yaKG0sCcBCIZW5v25fgnnR3Gb
CqRUqVYDd3sFyMxjB0Lkyj71aP9pc23aplStOaYQX+QhdVdzwBBnB6RTSWwgQdyn
n6Z5wcynCQoh4WBjtAK8Oa0/sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+n6toe
dFsLBvlVyVisryxm6iTgMB8GA1UdIwQYMBaAFJhQ6v/tPaKEXVHwlawRJFCI1WI/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzhBQS8zN0M4MTdGQzk3
NDQxMUYwODA0QTU5MThDNEY5QUUwMi9tRkRxXy0wOW9vUmRVZkNWckJFa1VJalZZ
ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21GRHFfLTA5b29SZFVmQ1ZyQkVrVUlqVllqOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzhBQS8zN0M4MTdGQzk3NDQxMUYwODA0QTU5MThDNEY5QUUwMi9tRkRxXy0wOW9v
UmRVZkNWckJFa1VJalZZajgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR28nOHhQCKDwor83xN44SSWj1QGNokx0S7xTdV9Gd2QVnMgxdxab9p+RV/54
ZVZfaqEY3jvylVSoc7Xl2c8LUg+jOb4zfXG2YhAT50nILYmhFNdSJJC02aGkRoSp
btC1JPpKF19/qqoFfCKwzA3wvUMjtw5q8wtteNFghdBHeMZ9M5vjiKnNz4a/1VdJ
F79icfqA2+TlAvZvEhBFCm91quVGAmq179tZw8ZmhniyiGdY4s9CXfkTy5toZDk3
gj3/Ft+s1+nsEQdNocKaOlKhMzm++WN3kK6wr7ZlHgVTUYwUPAvmzxLr38P4fKY8
Oaw3Ro7UjO8LvDAU1Qj8SLTOvg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:42 2026 by rpki-client